{"action":"Upgrade codemirror to 5.58.2 or later.","affected":[{"fixed":"5.58.2","introduced":"0"}],"component":"codemirror","cve_ids":["CVE-2020-7760"],"ecosystem":"npm","epss":0.05304,"exploited":false,"fixed_versions":["5.58.2"],"ghsa_id":"GHSA-4gw3-8f77-f72c","id":"tcs_01M5KF0ETHW8DZJYWFF87AC51G","modified_at":"2025-01-14T08:57:03.278860Z","published_at":"2021-05-10T18:46:27Z","references":["https://osv.dev/vulnerability/GHSA-4gw3-8f77-f72c","https://nvd.nist.gov/vuln/detail/CVE-2020-7760","https://github.com/codemirror/CodeMirror/commit/55d0333907117c9231ffdf555ae8824705993bbb","https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEMARMOTTAWEBJARS-1024450","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1024449","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1024445","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBCODEMIRROR-1024448","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBCOMPONENTS-1024446","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1024447","https://snyk.io/vuln/SNYK-JS-CODEMIRROR-1016937","https://www.debian.org/security/2020/dsa-4789","https://www.npmjs.com/package/codemirror","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-4gw3-8f77-f72c","url":"https://osv.dev/vulnerability/GHSA-4gw3-8f77-f72c"}],"summary":"Regular expression denial of service in codemirror"}